passwoed reset message

This commit is contained in:
CHIEFSOFT\ameye
2023-08-04 21:04:48 -04:00
parent a5e9841738
commit 0431b83a27
2 changed files with 20 additions and 19 deletions
@@ -411,6 +411,9 @@ long wrenchboard_api_main(CVars in, CVars &out) {
" WHERE p.uid ='%s' AND p.reset_pin='%s' AND p.status IN (0,1) AND m.uid='%s'", in["reset_uid"].c_str(), in["reset_pin"].c_str(), in["m_uid"].c_str())) {
in["reset_link"] = xx["pass_link"]; in["reset_link"] .set_valid( true );
out["status"] = "Ready";
out["status_msg"] = "ready_for_reset";
}
else{
out["status"] = "Invalid";
@@ -420,10 +423,9 @@ long wrenchboard_api_main(CVars in, CVars &out) {
}
REQ_STRING(in, "reset_link", 1, 100, "(.*)");
if (load_db_record(out, "SELECT p.id AS lostpass_id,p.member_id, p.uid AS pending_uid FROM password_reset p LEFT JOIN members m ON m.id = p.member_id WHERE p.pass_link ='%s' AND p.status IN (0,1)", in["reset_link"].c_str())) {
if (load_db_record(out, "SELECT p.id AS lostpass_id,p.member_id, p.uid AS pending_uid,m.uid AS m_uid FROM password_reset p LEFT JOIN members m ON m.id = p.member_id WHERE p.pass_link ='%s' AND p.status IN (0,1)", in["reset_link"].c_str())) {
if (out["lostpass_id"].Long() > 0){
pgsql_exec("UPDATE password_reset SET status = 3 WHERE status IN (0, 1) AND member_id=%lu AND id = %lu ", out["member_id"].Long(), out["lostpass_id"].Long());
CompletePassResetEmail(out);
pgsql_exec("UPDATE password_reset SET status = 3,expired = now() + '5 minutes' WHERE status IN (0, 1) AND member_id=%lu AND id = %lu ", out["member_id"].Long(), out["lostpass_id"].Long());
}else{
out["status_message"] = "Invalid Request";
}